Cinq façons de sécuriser votre organisation sur Zoho One

Cinq façons de sécuriser votre organisation sur Zoho One



Bonjour à tous,
Le fait que vos données soient accessibles en ligne demande à ce que leur sécurité soit garantie. En effet, le mot de passe peut ne plus s'avérer aussi efficace qu'avant, notamment lorsqu'il s'avère être d'une faible intensité. Un article de CNN indique que "123456" est toujours le mot de passe le plus utilisé à ce jour !
Vous pouvez heureusement sécuriser votre entreprise déjà en demandant à vos employés d'utiliser des mots de passe robustes, mais également grâce à nos astuces ci-dessous.

1. La surveillance des incidents
Vous pouvez surveiller et identifier les erreurs et problèmes relatifs aux connexions. Le tableau de bord de Zoho One est en effet un outil pratique qui identifie les menaces auxquelles votre organisation est confrontée : le graphique "Détails des connexions" vous permet d’évaluer les tentatives de connexion de tous les utilisateurs, l’emplacement et l’heure de la tentative, et même l’appareil utilisé pour la connexion. Une fois que vous savez où sont vos problèmes, vous pouvez commencer à les résoudre.

2. La gestion des accès
Gérer l'accès des utilisateurs est le B.A-ba de la sécurité. En effet, avec le changement des pratiques de travail et du télétravail, la gestion des accès est plus importante que jamais dans le sens où vous voulez être sûr que seules les bonnes personnes aient accès aux bons modules et avec les droits nécessaires.
Un écueil commun pour la plupart de nos utilisateurs est d’activer toutes les applications dans leur bundle Zoho One immédiatement et d’en accorder l'accès total à tout le monde. Or, vos agents d’assistance n’ont sans doute pas besoin d’accéder à Zoho Books ou Zoho Campaigns. Accordez un peu de temps à la stratégie et configurez la gestion des accès de vos utilisateurs en conséquence.

Gestion continue des accès avec Zoho One - Suivre régulièrement l’accès de vos utilisateurs et effectuer des modifications manuellement pourrait s’avérer difficile à tenir à long terme. C’est pourquoi nous vous suggérons d’utiliser les affectations conditionnelles dans Zoho One. L’affectation conditionnelle peut affecter automatiquement des applications aux utilisateurs existants et futurs en fonction de conditions basées sur des règles. Vous pouvez configurer une condition pour attribuer des rôles d’application spécifiques à des utilisateurs spécifiques, renforçant ainsi la sécurité basée sur l’accès.

Points d'accès sécurisés et fiables- Sécuriser l’accès physique est tout aussi important que sécuriser l’accès numérique. Nous vous suggérons fortement d’utiliser la fonction "IP autorisée" de Zoho One pour empêcher l'accès à partir d'une autre adresse IP que celle rentrée.. Cette fonctionnalité permet à vos utilisateurs d’accéder à leurs comptes Zoho One uniquement à partir d’adresses IP que vous aurez spécifiquement définies et de limiter les risques en n'autorisant que ce mode de connexion.

3. La délégation de sécurité
Imaginons un propriétaire d’organisation Zoho One qui partage ses identifiants avec un gestionnaire des RH, ce qui permet à ce dernier d’ajouter de nouveaux employés à l’organisation. Même si les raisons derrière l’action sont innocentes, elles peuvent entraîner des problèmes plus conséquents à long terme. C'est un exemple anodin de ce qu'il ne faut pas faire si vous souhaitez garder la main sur vos données. Si vous vous trouvez dans une situation où vous avez besoin de personnes supplémentaires pour gérer votre organisation Zoho One, nous vous suggérons fortement d’utiliser Zoho One Admins et Appli Admins pour déléguer des responsabilités — et seulement les responsabilités ! — en toute sécurité.

4. Connexion unique
Quand on parle de connexion unique (SSO), les gens ont tendance à se concentrer sur la convenance et la facilité d’utilisation. Cependant, le plus grand avantage de SSO est la sécurité. Non seulement il élimine l’utilisation de plusieurs mots de passe et la horde de problèmes qu’ils apportent, il suit également la norme SAML 2.0, assurant que seuls vos utilisateurs peuvent accéder à vos applications.
Pour en savoir plus sur le SAML, consultez ce lien de la vidéo.

5. Authentification multi facteur (AMF) fondée sur les politiques
L’utilisation de l'AMF est le premier conseil donné aux organisations par presque tous les experts en sécurité. Il comporte en effet plusieurs avantages :

Sécurité plus robuste - Le fait d’avoir une deuxième forme d’identification réduit considérablement les risques d'avoir les données exposées après un mot de passe piraté. La deuxième authentification qui vous demande confirmation attestera qu'il s'agit bien de vous.

Amélioration de la productivité et la souplesse- Nombreuses organisations qui ont adopté le télétravail, reconnaissent la productivité qu'il a apportée. Les employés ont leur propre marge de manoeuvre pour accéder à leurs données en toute sécurité, et ce d'où qu'ils soient : depuis chez eux, depuis un de leurs appareils, l'accès aux données reste sécurisé grâce à cette double authentification qu'ils peuvent configurer selon leurs moyens (QR Code, code, empreinte...).

Baisse du coût du service d’assistance et de gestion de la sécurité - L’authentification multi facteur permet de réduire le temps de réinitialisation des mots de passe. Leur laisser la main pour définir leur mot de passe et leur propre AMF permet de ne pas recourir au service informatique et d'épargner à tous de perdre du temps. Surtout à distance !

Une organisation peut établir sa propre sécurité en réglant elle-même ses politiques dans Zoho One. Nous vous suggérons de créer plusieurs politiques de sécurité avec différents degrés de sécurité, et de les appliquer aux utilisateurs en fonction de leur facteur de risque. Demandez-vous quels employés traitent les données les plus sensibles de votre organisation. Par exemple, les administrateurs de systèmes ou les directeurs de la paie peuvent avoir besoin de politiques de sécurité plus strictes que les agents de vente et marketing.


N'hésitez pas à nous partager votre expérience en commentaire.

L'équipe Zoho France

    • Sticky Posts

    • Collaboration sans faille avec Zoho One

      Bonjour à tous, Dans cet article nous allons voir comment Zoho One permet une collaboration à différents niveaux .       La façon dont nous travaillons évolue. À mesure que les entreprises se mondialisent, la plupart des activités sont menées en équipe.
      • Recent Topics

      • VAT on Multiple Expenses

        Firstly, might I say I am based in Ireland, and I'm not an accountant, and therefore my understanding of procedures could be somewhat limited. Scenario. An employee pays for items throughout a month, and therefore their claim for expenses includes multiple items - some of the items are VAT deductible (eg, an IT product) and some are not (eg, a client lunch). Discovery The odd thing in ZBooks, is that whilst it seems possible to add a VAT rate to a one-off item of expense, it is not possible to add
      • Detect and ignore bots in visitors

        The SalesIQ visitor numbers are basically useless to us because there is no bot detection. We get the same bots coming in from the same countries looking at the same pages every day. It can't be that difficult to tell the difference between an actual
      • Agent assignment filter?

        Godo day, We are starting to play with FSM to see if it's going to work for our needs. Now so far we have found that it's very restrcitve in the field department you you have layout rules or can't even hide fields depending on the users roles. We can't
      • DKIM Now Mandatory - Changes to Zoho Forms Email Policies

        Hello Zoho Forms Users, This post is to inform you about an important update regarding the authentication of all email domains in your Zoho Forms account. This year, we are doubling down on our commitment to deliver a secure, seamless, and empowering
      • is it possible to add more than one Whatsapp Phone Number to be integrated to Zoho CRM?

        so I have successfully added one Whatsapp number like this from this User Interface it seems I can't add a new Whatsapp Number. I need to add a new Whatsapp Number so I can control the lead assignment if a chat sent to Whatsapp Phone Number 1 then assign
      • Kiosk Page Refresh

        We have a Kiosk running from a button in contacts to update values and also add related lists, which works great, but when the kiosk is finished the page does not refresh to show the changes. Is there a way to force the contact to refresh/update when
      • Tips & tricks: Make SalesIQ automations work for you

        Every day, thousands of visitors land on your website. Some browse, some buy, and some leave without a word. But, wouldn’t it be great if you could automatically know who’s interested, engage them at the right moment, and never miss a lead, and all this
      • Add Custom Reports To Dashboard or Home Tab

        Hi there, I think it would be great to be able to add our custom reports to the Home Tab or Dashboards. Thanks! Chad
      • Digest Octobre - Un résumé de ce qui s'est passé le mois dernier sur Community

        Chers utilisateurs, Faisons le point sur les temps forts du mois d'octobre au sein de notre Community Zoho France. Partager des informations sensibles, comme des mots de passe, peut vite devenir compliqué et risqué. Les données circulent par email ou
      • How do I fully delete a user account

        Hi, I have two old accounts on my CRM which are inactive and show as 'Closed' in the list of users. BUT they are basically still there. How do I fully delete these accounts? They appear in some parts of CRM still such as the on the contact record emails
      • Automatically Add Recurring Zoho Meeting Events to Zoho Calendar / Zoho Meeting Calendar

        Hello Zoho Meeting Team, Hope you are doing well. We would like to request an enhancement regarding recurring meetings created inside Zoho Meeting. At the moment, when we schedule a recurring meeting in Zoho Meeting, it does not appear in Zoho Calendar
      • Credit Management: #6 Tackling Common Mistakes in Credit Based Billing

        Businesses extend credit to build relationships, make buying easy, and drive more sales. But somewhere between extending and collecting, things begin to slip. A few late payments here and there, an overlooked invoice, and a backlog make cash flow feel
      • Tasks Statuses

        Hi, The task status "Completed" is a final status which closes the task. We need to have a status "Cancelled". However, when the status is set to "Cancelled", the task prompt still has a blue button to Close Task. When the customer clicks that and closes
      • Updating Blueprint stage from my Deluge function

        Hi all, I need to update the blueprint stage. Its almost working, but ONLY if the current Deal stage is 'Closed Lost'. On any of my custom stages that Ive specified in the pipeline it doesnt work! My code: dealmap = Map(); deal_stage = deal.get("Stage");
      • Canvas: is it possible to have a fixed header?

        Hello. Does Canvas provide the option to have a fixed header, similar to the standard view? It would also be interesting for other parts of the interface, like the header or sidebar of the tab section. Thanks!
      • Limited layout rules in a module

        There is a limit of 10 layout rules per module. Is there a way to get that functionality through different customization or workflow + custom function (easily accessible), etc. Having just 10 is limiting especially if module contains a lot of data. Are
      • Introducing Lead Capture: Empower exhibitors to capture leads effortlessly

        Events provide a great opportunity for exhibitors to generate awareness and engage with potential customers. Efficiently distributing attendee information to exhibitors through a seamless and secure way is of paramount importance. Introducing Lead Capture
      • dealing with post dated cheques

        Hi, can you help me please the best way to deal with this We sell an item of three months duration that is paid for with post dated cheques in monthly stages example - item is sold £3000 Cheque 1 is for £1000 due at time of sale (say Sept) cheque 2 is dated 25th of next month (Oct) cheque 3 is dated 25th of next month +1 (Nov) Now, with invoice number one it's simple - i send a standard invoice as usual But with the other two here's what i want zoho to do next month i want it to send an invoice on
      • Using Contains as a filter

        We are using Zoho Reports, ServiceDesk Plus analytics. I do not see how to create a report filter using Contains comparison of a string values, is one string contained in another. For example, Task Title contains the word Monitor. Is this possible in Zoho Reports?  This reporting feature is available in SDP reporting. Thanks in advance, Craig Rice
      • Mass import of documents into Zoho Writer

        I'm using Google's word processor at the moment but feel that Zoho does a better job (on the online apps market). Iwant to move my documents (about 50-70) to Zoho but it seems to me that I have to import them seperately. Is it already possible to upload several documents at a time or is this a forthcoming feature? Cheers Rolli :?:
      • Set off Unearned Revenue

        Hi, I would like to get a clarification on the below. I have an opening balance of BD.725/- in my Unearned Revenue A/c which includes the overpayments of 6 clients. No One of my clients settled his invoices by paying the value of the invoice less the
      • How Zoho Desk contributes to the art of savings

        Remember the first time your grandmother gave you cash for a birthday or New Year's gift, Christmas gift, or any special day? You probably tucked that money safely into a piggy bank, waiting for the day you could buy something precious or something you
      • Add Webhook Response Module to Zoho Flow

        Hi Zoho Flow Team, We’d like to request a Webhook Response capability for Zoho Flow that can return a dynamic, computed reply to the original webhook caller after / during the flow runs. What exists today Zoho Flow’s webhook trigger can send custom acknowledgements
      • When moments in customer support get "spooky"

        It’s Halloween again! Halloween is celebrated with spooky symbols and meanings based on history and traditions, with each region adding its own special touch. While we were kids, we would dress up in costumes along with friends, attend parties, and enjoy
      • How can I delete duplicate transactions?

        I want to delete the duplicates not simply exclude them. I have duplicates, because I had automatic bank feeds turned on (had to make sure this critical functionality was working before migrating to Zoho). Now when I import my csv's exported from Wave,
      • Python - code studio

        Hi, I see the code studio is "coming soon". We have some files that will require some more complex transformation, is this feature far off? It appears to have been released in Zoho Analytics already
      • Multiple email addresses

        Multiple email addresses: I understand there is the ability to add an additional email field to a contact, but the functionality here needs to be drastically revised. Currently, this second email address does not log under the contact email history, nor is it available as a send address when using the Send Mail button within CRM. We recently migrated from GoldMine. I hate GoldMine, but there is one thing they did well: Email. I suggest copying them. Change the email field to an editable picklist,
      • ViewID and Zoho Desk API

        I'm looking at the documentation for Listing contacts and it looks like you can filter by ViewID. I assume this is views created in a department or all departments. Is this correct? And if so, how do I find the ViewID for that view? EDIT: I see the view
      • Ability to Link Reported Issues from Zoho Desk to Specific Tasks or Subtasks in Zoho Projects

        Hi Zoho Desk Team, Hope you're doing well. When reporting a bug from Zoho Desk to Zoho Projects, we’ve noticed that it’s currently not possible to select an existing task or subtask to associate the issue with. However, when working directly inside Zoho
      • Print Tickets

        We have field engineers who visit customers. We would like the option to print a job sheet with full details of the job and account/contact details.
      • Zoho Desk integration with Power BI

        Hi, I want to be able to create a Power BI report which has live updates of ticket data from zoho desk, is this possile at all? Thanks Jack
      • Ability to Attach Images When Reporting Issues to Zoho Projects from Zoho Desk

        Hi Zoho Desk Team, Hope you’re doing well. We’re using the Zoho Desk–Zoho Projects integration to report bugs directly from support tickets into the Zoho Projects issue tracker. This integration is extremely useful and helps us maintain smooth coordination
      • Ability to Choose Task List and Add Subtasks When Creating Tasks from Zoho Desk

        Hi Zoho Desk Team, Hope you’re doing well. We’re using the Zoho Desk–Zoho Projects integration to seamlessly connect customer tickets with project tasks. While the integration works great overall, we noticed two important limitations that affect our workflow
      • Sync Task Status from Zoho Projects to Zoho Desk

        Hi Zoho Desk Team, Hope you’re doing well. We’re actively using the Zoho Desk–Zoho Projects integration, which helps our support and project teams stay aligned. However, we noticed that when we change a task’s status in Zoho Projects, the change is not
      • Default/Private Departments in Zoho Desk

        1) How does one configure a department to be private? 2) Also, how does one change the default department? 1) On the list of my company's Zoho Departments, I see that we have a default department, but I am unable to choose which department should be default. 2) From the Zoho documentation I see that in order to create a private department, one should uncheck "Display in customer portal" on the Add Department screen. However, is there a way to change this setting after the department has been created?
      • Zoho CRM IP Addresses to Whitelist

        We were told to whitelist IP addresses from Zoho CRM.  (CRM, not Zoho Mail.) What is the current list of IP Addresses to whitelist for outbound mail? Is there a website where these IP addresses are published and updated?  Everything I could find is over
      • Color of Text Box Changes

        Sometimes I find the color of text boxes changed to a different color. This seems to happen when I reopen the same slide deck later. In the image that I am attaching, you see that the colors of the whole "virus," the "irology" part of "virology," and
      • The difference between Zoho Marketing Automation and Zoho Campaigns

        Greetings Marketers! This post aims to differentiate between Zoho Marketing Automation and Zoho Campaigns. By the time you get to the end of the post, you will be able to choose a product that objectively suits you. What is Zoho Marketing Automation?
      • How to use Rollup Summary in a Formula Field?

        I created a Rollup Summary (Decimal) field in my module, and it shows values correctly. When I try to reference it in a Formula Field (e.g. ${Deals.Partners_Requested} - ${Deals.Partners_Paid}), I get the error that the field can’t be found. Is it possible
      • Zoho Mail Android app update - View emails shared via Permalink on the app.

        Hello everyone! In the latest version(v2.8.2) of the Zoho Mail Android app update, we have brought in support to access the emails shared via permalink within the app. Earlier, when you click the permalink of an email, you'll be redirected to a mobile
      • Next Page